Privacy Policy from ShareYourSpace GmbH
ShareYourSpace GmbH, as the operator of the ShareYourSpace platform on the websites (including domain subpages) https://shareyourspace.com, https://shareyourspace.de and https://shareyour.space, hereinafter collectively referred to as the websites, is the controller within the meaning of the applicable data protection law, in particular the General Data Protection Regulation (‘GDPR’) and for the personal data of the user of these websites.
As part of our duty to provide information (Art. 13 et seq. GDPR), we will inform you below about which data is processed when you visit our platform and on what legal basis this is done. You will also receive information on how we protect your data in technical and organisational terms and what rights you have vis-à-vis us and the competent supervisory authority.
Due to your registration or a legal requirement, you may be obliged to provide personal data, in particular if this is necessary to fulfil your own contractual or legal obligations. In this respect, you may be liable to pay fines or damages if you fail to provide this information. Insofar as the provision of your data is necessary for the fulfilment of our obligations, there is an obligation on your part. Refusal to do so may result in the loss of your entitlement to benefits as well as claims for damages on our part.
You are not subject to automated decision-making within the meaning of Art. 22 GDPR.
1. information on the person responsible
Name and contact details:
Represented by the managing director Dr Tobias Wagner
Schellingstr. 85, D-80799 Munich
E-mail: tobias.wagner@shareyourspace.com
2. data protection officer
We are there for you when it comes to data protection. You can reach our data protection officer at
E-mail: spaceguide@shareyourspace.com
Schellingstr. 85, D-80799 Munich
3 Processing of your personal data
3.1 Informational use of our website
When you access our websites merely to visit them, log files containing the following information are processed automatically:
- IP address of the requesting computer
- Type of Internet browser used
- Language of the Internet browser used
- Version of the Internet browser used
- Operating system and its version
- Interface of the operating system
- Pages accessed
- Date and time of the visit
- Time zone difference to Greenwich Mean Time (GMT)
- Access status / http status code
- Amount of data transferred
- Referrer
- Websites that are accessed by the visitor's system via our websites
The log files contain your IP address and possibly other personal data. Therefore, an assignment is generally possible. However, we only store your data temporarily and, in particular, not together with other personal data.
The processing of the above-mentioned data is necessary for the provision of our websites. We store the data for the purpose of the security of our information technology systems, i.e. to prevent disruptions or unlawful or wilful interference that could impair the availability, authenticity, completeness and confidentiality of stored or transmitted personal data and the security of related services that are offered or accessible via these networks or information systems. This purpose also justifies our legitimate interest in processing the data on the legal basis of Art. 6 para. 1 lit. f GDPR. The log files, which also contain your IP address, are deleted or anonymised immediately after they are no longer required to achieve the aforementioned purposes, but after one month at the latest.
3.2 Use of offers on the websites
3.2.1 Registration as a tenant
You have the option of browsing offers on the websites without registering. If you wish to book or rent space on our websites, you must register as a tenant. We require certain minimum information about you and your company (if the tenant is a company, or corresponding information if the contractual partner is a person under public or private law). These are marked as mandatory fields (*) in the registration form and in the tenant profile. Any additional information is voluntary.
When you complete your registration, we store your IP address, date and time of your registration together with the data you provide. Your data will be used for the purpose of managing your customer account and providing the associated functions, such as processing customer data and for enquiry and booking processes. The legal basis for the storage of your customer account data is Art. 6 para. 1 lit. b GDPR.
We store your data that you have provided to us as part of the voluntary registration process as long as you do not delete your customer account with us and as long as we are not required to store data beyond this for contractual or legal (e.g. tax) reasons. In this case, we will only delete the data when the legal reason no longer applies. If you make changes to your data, the old data will be deleted and only the updated data will be stored. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we block your data to the extent that it is only processed for the necessary purposes.
You can delete or modify your voluntary customer account with us at any time. To delete your customer account or user account, please send an email to spaceguide@shareyourspace.com.
3.2.2 Registering as a landlord
If you wish to offer your space on our websites, you must register as a landlord. We require certain minimum information about you, your company (if the landlord is a company, or corresponding information if the contractual partner is a person under public or private law) and the space offered. These are marked as mandatory fields (*) in the registration form and in the landlord profile. Additional information is voluntary.
When you complete your registration, we store your IP address and the date and time of your registration together with the data you have provided.
Your data is used for the purpose of managing your customer account and providing the associated functions, such as processing your customer data and displaying your offers. The legal basis for the storage of your customer account data is Art. 6 para. 1 lit. b GDPR.
We store your data that you have provided to us as part of your voluntary registration as long as you do not delete your customer account with us and as long as we do not have to store data beyond this for contractual or legal (e.g. tax) reasons. In this case, we will only delete the data when the legal reason no longer applies. If you make changes to your data, the old data will be deleted and only the updated data will be stored. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we block your data to the extent that it is only processed for the necessary purposes.
You can delete or modify your voluntary customer account with us at any time. To delete your customer account or user account, please send an email to spaceguide@shareyourspace.com.
3.2.3 Placements and bookings
If you initiate an enquiry or booking on our platform, we need the following data to fulfil the contract with you:
- First name, surname, company name (if the tenant or landlord is a company or corresponding details if the contractual partner is a person under public or private law) and (invoice) address in order to process the enquiry or booking and send the invoice.
- Email address to send the enquiry and booking confirmation and to provide you with contract documents immediately after booking.
- Your telephone number in order to provide fast support.
- Your payment information, or that of the person responsible under public or private law, in order to process payment for your booking.
The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. The data will be stored for as long as is necessary to fulfil the contract. Beyond this, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we block your data to the extent that it is only processed for the necessary purposes.
In addition to this data, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data is in our legitimate interest (Art. 6 para. 1 lit. f GDPR) to ensure the security of our systems and to prevent misuse. This additional data will be deleted as soon as it is no longer required, at the latest when the contract with you has been processed.
3.3 Contact by e-mail
You have the option of contacting ShareYourSpace by e-mail. The data transmitted in the e-mail will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process your contact.
The legal basis for processing your data depends on the content of your enquiry. In principle, the legal basis is our legitimate interest in accordance with Art. 6 para. 1 f GDPR to enable us to process your enquiry reliably. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been conclusively clarified.
Irrespective of this, we may send you legally binding notifications, such as changes to our terms and conditions or this privacy policy. Your data must also be processed for this purpose. The legal basis for this is our legitimate interest in accordance with Art. 6 para. 1 f GDPR.
If your email is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 lit. b GDPR. This data is stored for as long as it is required to fulfil the contract. In addition, we only store your data in order to fulfil contractual or legal obligations (e.g. tax obligations).
3.4 Support
You can access various support services on our websites, submit a support enquiry or contact us directly. We also use the Zoho tool from Zoho Corporation Pvt. Ltd, All Rights Reserved, 4141 Hacienda Drive, Pleasanton, CA 94588, USA, for this purpose. Zoho receives the data that you provide as part of the enquiry.
For each support enquiry, this is usually the following information: First and last name, telephone number, email address and, if relevant, username, user ID, booking ID and the history of your previous support requests.
The legal basis for this arises from our legitimate interest in accordance with Art. 6 para. 1 f GDPR. The data is necessary in order to be able to assign the enquiry to a specific customer account, if applicable, and to be able to track and answer your support enquiry. The data is stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified.
Zoho also receives the following information as part of the support enquiry: Email address, first and last name, phone number, time (date and time) your data was submitted to us, your IP address and any other personal data you voluntarily submit as part of your support request. Zoho can analyse and categorise your enquiries for faster processing and to improve support. For example, frequently used keywords are assigned to your enquiry. In principle, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 f GDPR to answer your question in a targeted and reliable manner and to further improve the service. Your IP address is recorded to ensure the security of our systems and to prevent misuse.
3.5 Newsletter
On our platform, we offer you the opportunity to subscribe to our newsletter free of charge. In addition to your declaration of consent, we need your e-mail address for this. By sending the newsletter registration, you consent to the processing of your data by us.
Further details, e.g. your name, are voluntary and are used to address you personally. The legal basis for sending the newsletter is Art. 6 para. 1 lit. a GDPR.
We use the mail provider MailChimp, The Rocket Science Group LLC, 675 Ponce de Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA (‘MailChimp’) to send the newsletter. Your data will be transmitted to MailChimp in the USA and stored there. In addition to the simple sending of emails, MailChimp offers various analysis options in order to find out for us whether, when and where the newsletters sent are opened, used or rejected. Among other things, MailChimp uses cookies and similar technologies for this purpose.
You can find more information about MailChimp's privacy policy at the following Internet addresses:
https://mailchimp.com/legal/privacy/
https://mailchimp.com/legal/cookies/
We will only send you the newsletter if you first confirm your registration by clicking on the link provided in a confirmation e-mail sent to you for this purpose. This is to ensure that you can only subscribe to the newsletter yourself. You must confirm your subscription promptly after receiving the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.
In addition, we store the time (date and time) of the transmission of your data to us and your IP address as part of your newsletter registration. The processing of this data corresponds to our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to document your consent in order to ensure the security of our systems and counteract misuse.
Your data will not be passed on to third parties and will only be processed in connection with the sending of newsletters. The purpose of processing your email address is to enable us to send you the newsletter. Other data during the registration process is used either to address you personally or to ensure the security of our services and prevent misuse of the e-mail address used.
Your data will only be stored for as long as is necessary to fulfil the purpose. Your e-mail address will therefore be stored for the duration of your active newsletter subscription if you have given your consent. The additional data that we automatically collect during your registration (IP address, date and time) will be deleted at the latest when you cancel your newsletter subscription.
The newsletter mailing also includes the sending of information about products or services, such as new product categories, functionalities, etc.
You can cancel or unsubscribe from our newsletter at any time. You will find the link to do so at the end of each newsletter. By doing so, you revoke your consent or object to any further use of your data for the purpose of sending the newsletter.
3.6 Cookies
We use our own cookies and cookies from ‘third-party providers’ on our websites. Cookies are text files that are sent from our web server to your browser when you visit our websites and are stored on your computer for later retrieval. A cookie can therefore be used to identify your Internet browser when you visit the websites again.
In the case of third-party cookies, data is transferred from your web browser to the third-party web server and stored there when you visit our website.
In principle, you can ensure yourself that no cookies are stored on your computer or that only certain cookies are permitted in the browser. You can select this in your Internet browser settings. You can also view and delete the stored cookies there.
You were already informed about the use of cookies when you first visited the website, as well as the resulting right to object. The legal basis for the use of cookies is § 6 para. 1 lit. f GDPR.
If you block all cookies, it is possible that not all functions of our websites will be available to you.
3.6.1 Google Conversion Tracking
This website uses the online advertising programme ‘Google AdWords’ and, as part of this, conversion tracking to measure on which websites the advertisements work best. The conversion tracking cookie is set when a user clicks on an advert placed by Google or its partners. The cookies set as a result lose their validity after 30 days and are not used for personal identification. These cookies allow us and Google to recognise which ad you came to our website via. Each visitor who has come to our site via Google AdWords receives a different cookie. The information collected using the conversion cookie is used to determine which visitors have triggered a specific action on our website via adverts. We find out the total number of users who have clicked on our adverts and which clicks led to an action. We do not receive any information with which a user can be personally identified. Users who do not wish to participate in tracking can easily delete or deactivate the Google Conversion Tracking cookie via their Internet browser under the user settings. These users will then not be included in the conversion tracking statistics. Find out more about Google's privacy policy at http://www.google.de/privacypolicy.html.
3.6.2 Google Remarketing
Our websites also use the Google programme for interest-based advertising, known as Google Remarketing. Third-party providers, including Google, place adverts on websites on the Internet and use stored cookies for this purpose based on a user's previous visits to this website. You can also disable the use of cookies by Google for these purposes by visiting the Google advertising opt-out page https://policies.google.com/technologies/ads. Alternatively, you can disable the use of third-party cookies by visiting the Network Advertising Initiative opt-out page http://www.networkadvertising.org/managing/opt_out.asp.
3.6.3 Doubleclick
Doubleclick by Google (www.doubleclick.com) uses technologies to present you with adverts that are relevant to you. The provider of Doubleclick is Google Ireland Limited, Gordon House, Mountain View, Barrow St Dublin 4 Ireland. If you do not want Doubleclick to continue collecting anonymised data, click https://www.google.de/settings/ads/onweb#display_optout (‘OptOut’). This OptOut cookie deletes the previously stored information and prevents any further collection of information. If you have already activated the ‘OptOut’, you can cancel this setting at any time by clicking on the ‘OptIn’ button.
3.6.4 Google Analytics
The Google Analytics analysis service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, hereinafter referred to as ‘Google Analytics’, is implemented on our website.
Google Analytics uses cookies that store the following information:
- Type of Internet browser used
- Version of the internet browser
- The operating system you are using
- Referrer (previously visited website)
- Your shortened IP address
- Time of the server request
Name Cookie |
Purpose of the cookie |
Storage duration |
---|---|---|
utmc_ |
Timestamp with the time at which the user leaves the website. Used by Google Analytics to calculate the duration of a website visit. |
until the end of the browser session |
utma_ |
Collects data on the number of visits a user has made to the website as well as the data for the first and last visit. |
2 years |
__utmb |
Used to determine new sessions/visits. The cookie is created when the Javascript library is executed and no __utmb cookies are present. The cookie is updated every time data is sent to Google Analytics. |
30 minutes |
utmt_ |
Is used to throttle the request rate. |
10 minutes after setting/renewal |
utmz |
Saves the traffic source or campaign that explains how the user reached your website. The cookie is created when the Javascript library is executed and is updated each time data is sent to Google Analytics. |
2 years |
We use the Google Analytics function to anonymise your IP address before it is stored or processed. Your IP address is generally truncated within the European Union/EEA and only then transmitted to Google servers in the USA. Your information is processed as a pseudonym and we will not merge it with your other personal data.
We use the data collected in this way for statistical purposes in order to optimise our website and offers.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.
You can either prevent the storage of Google cookies directly in your browser settings or prevent the processing of your data by clicking on the following link and opting out: https://tools.google.com/dlpage/gaoptout. This sets an ‘opt-out cookie’ that prevents the collection of your user data on this website.
You can find Google's privacy policy at the following link https://policies.google.com/privacy?hl=de.
3.6.5 Hotjar
We use Hotjar to better understand the needs of our users and to optimize the offering on this website. With the help of Hotjar's technology, we get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click, etc.) and this helps us to align our offering with the feedback from our users. Hotjar works with cookies and other technologies to collect information about the behavior of our users and their end devices (in particular the IP address of the device (only recorded and stored in anonymized, abbreviated form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or us to identify individual users or combined with other data about individual users. You can find more information in Hotjar's privacy policy. Hotjar's privacy policy can be found under the following link: https://www.hotjar.com/legal/policies/privacy
You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as the setting of Hotjar tracking cookies on other websites if you click on this opt-out link: https://www.hotjar.com/legal/compliance/opt-out.
3.7 Social Plugins
Social Plugins (e.g. Facebook, Twitter) can collect data from your website visit and use it for networking. ShareYourSpace integrates social plugins from the following platforms:
3.7.1 Facebook
Our websites use social plugins from the social network facebook.com ("Facebook"). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Detailed information on the functions of the individual plugins and their appearance can be found on the following website: https://developers.facebook.com/docs/plugins.
The websites on our website that contain Facebook social plugins establish a direct connection to Facebook's servers via your browser when you open them. This sends Facebook the information that you have accessed the page of our website containing the social plugin.
If you are logged in to Facebook at this time, your visit to our pages and all of your interactions in connection with the social plugins (e.g. clicking the "Like" button, creating a comment, etc.) can be assigned to your Facebook profile and stored by Facebook. Even if you do not have a Facebook profile, it cannot be ruled out that Facebook will save your IP address.
With regard to the purpose and scope of data collection and the processing and use of data by Facebook, we refer to the Facebook privacy policy: https://www.facebook.com/about/privacy/. There you will also find an overview of the setting options in your personal Facebook profile to protect your privacy and your associated rights.
To prevent Facebook from collecting data during your stay on our website, you must be logged out of Facebook before visiting our pages. One way to prevent Facebook from generally accessing your data on our and other websites is to exclude the Facebook social plugins using an add-on for your browser.
3.7.2 Twitter
This website uses functions of the Twitter service. The functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. When you use Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other Twitter users. When data is forwarded, data is also transferred to Twitter. ShareYourSpace, as the website provider, points out that we have no knowledge of the content of the data transmitted or how it is used by Twitter. For this reason, we refer you to the following link for further information regarding Twitter's privacy policy: http://twitter.com/privacy. If you would like to change your privacy settings on Twitter, you can do so using this link: http://twitter.com/account/settings.
3.7.3 Instagram
This website includes functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Instagram. You can find more information on this in Instagram's privacy policy: http://instagram.com/about/legal/privacy.
3.7.4 Youtube
We use the provider Youtube of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, to embed videos. The videos were embedded in the extended data protection mode. YouTube uses cookies to collect information about visitors to its website. YouTube uses these, among other things, to collect video statistics, prevent fraud and improve user-friendliness. This also leads to a connection being established with the Google DoubleClick network. If you start the video, this could trigger further data processing operations. We have no influence over this. You can find more information about data protection at YouTube in their privacy policy at: http://www.youtube.com/t/privacy_at_youtube.
3.8. Icon links to social networks
We use small icons on our website that link to our website on third-party platforms (Facebook, Twitter, YouTube and Google+). These are hyperlinks. Your data is not transferred automatically, but only when you click on the icons and a new tab opens in your browser with the third-party website.
4. Recipients of the data
If you use our services as a landlord or tenant, we will share your personal data with the other party to the extent necessary to carry out the booking. We use a web host for the technical provision of our platform and Google to carry out the usage analysis. They receive your personal data as part of a data processing agreement. For services related to the operation and optimization of our websites and business transactions, we share the data necessary for these services in accordance with the provisions of our privacy policy.
We use services whose providers are sometimes based in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose data protection level does not correspond to that of the European Union. If this is the case and the European Commission has not issued an adequacy decision for these countries (Art. 45 GDPR), we have taken appropriate precautions to ensure an appropriate level of data protection for any data transfers. These include, among others, the standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the data transfer on exceptions to Art. 49 GDPR, in particular your express consent or the necessity of the transfer to fulfill the contract or to carry out pre-contractual measures.
When using the services of Google, YouTube, Zoho and MailChimp, your data will be transferred to the USA and thus to a third country within the meaning of Art. 44 GDPR to the extent described above and processed there.
If a third country transfer is planned and there is no adequacy decision or suitable guarantees, it is possible and there is a risk that authorities in the respective third country (e.g. secret services) can gain access to the transmitted data in order to record and analyze it, and that the enforceability of your data subject rights cannot be guaranteed.
We also work with developers who are not based in the European Union. These developers are not directly responsible for processing your data, but have access to our systems as part of their work. We have concluded a data processing agreement and the EU standard contractual clauses with all developers to ensure an appropriate level of data protection. You can request a copy of the relevant agreements at datenschutz@shareyourspace.com.
5. Your rights
If we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: right to information, right to rectification, right to restriction of processing, right to erasure, right to information and right to data portability. In addition, you have a right of objection and a right of revocation.
5.1 Right to information
You have the right to request confirmation from us as to whether we process your personal data.
If we process your personal data, you have the right to receive information about the following:
- the purposes of the processing
- the categories of personal data being processed
- the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in third countries or international organizations
- where possible, the planned duration for which your personal data will be stored, or, if this is not possible, the criteria for determining this duration
- the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- if the personal data were not collected directly from you, all available information on the origin of the data
- the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.
If we transfer your data to an international organization or to a third country, you also have the right to request information as to whether appropriate guarantees pursuant to Art. 46 GDPR exist in connection with the transfer.
5.2 Right to rectification
You have the right to have the data we have stored about you rectified or completed if it is incorrect or incomplete. We will carry out the rectification or completion immediately.
5.3 Right to restrict processing
Under certain circumstances, you have the right to request that we restrict the processing of your personal data. To do this, at least one of the following conditions must be met:
- You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data.
- We no longer need the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
- You have objected to the processing pursuant to Art. 21 (1) GDPR, as long as it has not yet been determined whether our legitimate reasons outweigh your interests.
5.4 Right to erasure
You have the right to request that we immediately erase your personal data if we are obliged to do so. This is the case if one of the following conditions is met:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing was based according to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- Your personal data have been processed unlawfully.
- The erasure of the personal data is necessary to fulfill a legal obligation under Union or Member State law to which we are subject.
- Your personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
If we have made your personal data public and we are obliged to delete it in accordance with the aforementioned conditions, we will take appropriate measures, including technical ones, taking into account the technologies available to us and the implementation costs, to inform other data controllers who process the personal data that you have requested that we delete all links to these personal data or copies or replications of these personal data.
However, your right to deletion does not apply if the processing is necessary for the following reasons, among others:
- Exercise of the right to freedom of expression and information;
- Fulfillment of a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- Reasons of public interest in the area of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR
- Archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in (1) is likely to make the achievement of the objectives of this processing impossible or seriously compromises it, or
- Assertion, exercise or defense of legal claims.
5.5 Right to information
If you have asserted your right to rectification, erasure or restriction against us, we are obliged to inform all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of the processing of your data, unless doing so should prove impossible or involve disproportionate expenditure.
5.6 Right to data portability
Under the following conditions, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format and the right to have this data transmitted to another responsible party:
- The processing is based on consent in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract in accordance with Art. 6 (1) (b) GDPR and
- the processing is carried out using automated procedures.
You have the right to request that we transmit your personal data directly to another controller, provided this is technically feasible and does not affect the freedoms and rights of other persons.
This right to data portability does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
5.7 Right of objection
You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR for reasons related to your particular situation. This also applies to profiling referred to in these provisions.
We will no longer process your personal data after an objection unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data to conduct direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising. This also applies to profiling insofar as it is related to direct advertising.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.
In connection with the use of information society services, you have the option of exercising your objection by means of automated procedures that use technical specifications, regardless of Directive 2002/58/EC (Directive on privacy and electronic communications).
5.8 Right of revocation
According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent at any time. Revoking your consent does not retroactively invalidate the legality of the processing.
5.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. You can exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
An overview of the respective state data protection officers of the states and their contact details can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
6. Current status and changes to this data protection policy
Status: October 29, 2021